General

  • Target

    f450a953e6ece40fc0ae78bc361c0aaf54038690db22bdc2b8608a72e6466663

  • Size

    36KB

  • Sample

    240627-1enxcavbpn

  • MD5

    0e6e3300942d870111a63a58ec64fb46

  • SHA1

    3af3c237f928aae0c5af7aa130234f551c060e98

  • SHA256

    f450a953e6ece40fc0ae78bc361c0aaf54038690db22bdc2b8608a72e6466663

  • SHA512

    7afb7467b2a61ca8e545570e74caadd94ca0c42764b958664af6a245825d8dc787254867f5e6a3f6db9394369120bf5874382075418cc5d9f63883c586c94ba4

  • SSDEEP

    384:0iSsqdg1vA92TLVUG+PDA0jmH1HA/YFZDWutE/:M+1o98C0lg/YFZDW

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.45.208:443/i7icE0_nS8KkMqUzwk_20gv1OaXJpuIqVbVYm9SdUEDLP

Targets

    • Target

      f450a953e6ece40fc0ae78bc361c0aaf54038690db22bdc2b8608a72e6466663

    • Size

      36KB

    • MD5

      0e6e3300942d870111a63a58ec64fb46

    • SHA1

      3af3c237f928aae0c5af7aa130234f551c060e98

    • SHA256

      f450a953e6ece40fc0ae78bc361c0aaf54038690db22bdc2b8608a72e6466663

    • SHA512

      7afb7467b2a61ca8e545570e74caadd94ca0c42764b958664af6a245825d8dc787254867f5e6a3f6db9394369120bf5874382075418cc5d9f63883c586c94ba4

    • SSDEEP

      384:0iSsqdg1vA92TLVUG+PDA0jmH1HA/YFZDWutE/:M+1o98C0lg/YFZDW

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks